WordPress Administrator Z Privilege Escalation Vulnerability

A missing authorization vulnerability in the WordPress Administrator Z plugin, versions through 2025.03.24, allows for privilege escalation. This vulnerability could enable a low-privileged user to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining higher access rights and possibly full control over the website.

Remediation

Users of the WordPress Administrator Z plugin should update to version 2025.03.27 or later. Patchstack users can enable auto-update for vulnerable plugins.